Maybe they are using the Warpcast API and not signers?
I thought I logged in using a QR code, but I just tried to cast via Herocast and it didn't work. I'll let @hellno confirm this. Is there a way to see/verify onchain how many EdDSA keypairs one has created?